topic Re: ASA: NAT & Multicast in Network Security

ASA: NAT & Multicast

fedecotofaja — Mon, 11 Mar 2019 15:36:23 GMT

Hi All,

I need to know if the ASA 5580 (version 8.1) supports NAT for Multicast traffic....

Thank you!!

Federico.

Re: ASA: NAT & Multicast

Kureli Sankar — Mon, 25 May 2009 23:32:18 GMT

This is new feature in 8.2 code.

Pls. refer this link:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_bulletin_c25-526545.html

â€¢ Multicast group Network Address Translation (NAT): Multicast applications include distance learning, telemedicine, and financial applications. The multicast group NAT feature enables the separation of internal multicast streams from external multicast streams for added security.

Re: ASA: NAT & Multicast

a.salazar — Tue, 26 May 2009 17:07:10 GMT

Thank you very much!

Re: ASA: NAT & Multicast

aceadmin — Thu, 10 Dec 2009 22:30:08 GMT

Hello,

We are trying to NAT a multicast group through an ASA 5510 running 8.2.1. We have it in routed mode and the group 224.1.1.8 exists on the inside, and we want it to be 227.1.1.10 on the outside. We can NAT the source, but need the group to be translated. Am I correctly understanding that this is a new feature in 8.2.1? If so, can you provide pointers to working configs?

Thank you

Re: ASA: NAT & Multicast

Kureli Sankar — Fri, 11 Dec 2009 00:00:58 GMT

static (outside,inside) 224.1.1.8 227.1.1.10 netmask 255.255.25.255

What that line does is destination NAT. The packets that arrive on the inside interface destined to 224.1.1.8 will be changed ot 227.1.1.10 on the outside

You need to provide source address translation for your source if you need to.

-KS

Is there a feature

Oscar Quinonez — Fri, 14 Nov 2014 20:22:16 GMT

Is there a feature specification for Multicast group NAT?

I see on your example that one group address is translated to another group address. More specificaly I'm interested on a Multicast group being translated to a unicast address and viceversa?

Sometimes I'm very annoyed by

zheka_pefti — Sat, 17 Jan 2015 21:22:17 GMT

Sometimes I'm very annoyed by the way Cisco represents the information about a particular topic. The question was asked about NAT and multicast and the answer is absolutely perfunctory and non-relevant. People asking the question of NAT support of multicast on ASA don't need to know what applications use multicast. Moreover, there's no Cisco guide shedding any word how to configure NAT for multicast. Any documentation about multicast support for ASA software just doesn't mention it. Why does Cisco representative points to the generic article that doesn't bear any technical information other then product bulletin ?